PBF issue when routing VPN flow to AWS

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

PBF issue when routing VPN flow to AWS

L2 Linker

Hello Community,

 

I need help on this topic :

How can I configure PBF to route VPN flow to AWS on PaloAlto Firewall?

Thank you for help !

1 accepted solution

Accepted Solutions

@Stephen24 Because this is the only supported by AWS setup. . You can possibly use PBF on the PA end to send traffic to one of the VPN tunnels, but without BGP, there will be no way for the AWS VPN gateways to know which of the tunnel to send the traffic to. 

View solution in original post

5 REPLIES 5

L4 Transporter

Is there a specific reason you need to use PBF? AWS provides a detailed template on using BGP with VPN connections to PAs.

Hello,

Thank you for your reply

Are you talking about this topic  : https://docs.aws.amazon.com/vpc/latest/adminguide/palo-alto.html

?

We would like to make it work with PBF

 

Thks!

Yes, that's the basis of it. The addresses and variables in that link won't be correct for your implementation. The AWS portal will provide the configuration specific to your environment.

...so,why PBF will not work with this implementation?

 

Thks

@Stephen24 Because this is the only supported by AWS setup. . You can possibly use PBF on the PA end to send traffic to one of the VPN tunnels, but without BGP, there will be no way for the AWS VPN gateways to know which of the tunnel to send the traffic to. 

  • 1 accepted solution
  • 4063 Views
  • 5 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!